Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/2f7894-756d-4cbf-977c-3c5ae761cab0/1/DLeircbcrxd7k6M2y47OzFrzAlg.mft
File: DLeircbcrxd7k6M2y47OzFrzAlg.mft (raw, json)
Hash identifier: 4TTDIMTn3/keX2YjxdketTtdN50YE5veykfxfIuSTkE=
Subject key identifier: 61:0B:B1:4A:7A:C2:4F:5E:36:37:B0:23:24:3A:AC:FF:7D:38:49:49
Authority key identifier: 0C:B7:A2:AD:C6:DC:AF:17:7B:93:A3:36:CB:8E:CE:CC:5A:F3:02:58
Certificate issuer: /CN=0cb7a2adc6dcaf177b93a336cb8ececc5af30258
Certificate serial: 01984A41827D61B27D0325D956CF041CCD95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DLeircbcrxd7k6M2y47OzFrzAlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/2f7894-756d-4cbf-977c-3c5ae761cab0/1/DLeircbcrxd7k6M2y47OzFrzAlg.mft
Manifest number: 08A8
Signing time: Sun 27 Jul 2025 05:01:03 +0000
Manifest this update: Sun 27 Jul 2025 05:01:03 +0000
Manifest next update: Mon 28 Jul 2025 05:01:03 +0000
Files and hashes: 1: DLeircbcrxd7k6M2y47OzFrzAlg.crl (hash: G53Vd75HTJpsTZI9vxHhukEuX9NOn8agrVtlHSuhcQg=)
2: DXgX_cMOKWmvyb5MDCu-yzGISYQ.roa (hash: fFfPzCo7zqTjJgcKhX4SxPHlq4HGUqWFQ0c7O8IZwwY=)
3: OVOzZ2g8zifvqCY8wDqOXjL1AOc.roa (hash: ei5vXf6WAl7FEI5d5Hm8KKAZYtO3URaho5E46M2Vof8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/2f7894-756d-4cbf-977c-3c5ae761cab0/1/DLeircbcrxd7k6M2y47OzFrzAlg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/2f7894-756d-4cbf-977c-3c5ae761cab0/1/DLeircbcrxd7k6M2y47OzFrzAlg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DLeircbcrxd7k6M2y47OzFrzAlg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:82:7d:61:b2:7d:03:25:d9:56:cf:04:1c:cd:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cb7a2adc6dcaf177b93a336cb8ececc5af30258
Validity
Not Before: Jul 27 05:01:03 2025 GMT
Not After : Jul 28 05:01:03 2025 GMT
Subject: CN=610bb14a7ac24f5e3637b023243aacff7d384949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f7:85:c8:69:ba:e9:6c:21:94:57:a4:24:0e:
70:72:57:94:aa:3e:ab:e5:9f:14:ee:4e:71:ab:ce:
8f:23:0f:eb:eb:1c:52:fd:1e:bd:b6:f0:11:e4:79:
01:cc:50:15:a8:ee:e8:ea:11:fe:3c:a1:26:f3:35:
de:85:41:d7:fa:11:69:72:91:aa:2a:a0:d6:ad:fd:
95:08:c0:0c:3b:f8:a1:ab:92:22:50:42:16:02:27:
31:5f:66:b6:99:04:2a:ec:b4:12:d6:87:fb:33:a7:
52:ca:c2:c2:ad:42:81:0f:e9:f4:53:53:8f:c6:9a:
13:6a:90:47:5e:0f:7e:52:a0:be:1d:56:9f:23:d8:
f1:64:4a:ac:7b:1b:03:aa:4d:ee:41:06:53:13:9e:
d9:72:65:0d:9b:80:aa:0f:6e:a3:0e:3a:8d:2f:24:
fb:a1:f5:a8:be:3b:98:cc:08:a5:57:1c:0b:a7:a9:
18:93:c3:50:cc:0d:5d:f4:52:b4:50:e9:1c:5f:24:
35:21:9b:f2:c7:7a:7c:d3:0d:54:d0:f8:f6:4a:ec:
1d:4f:6b:8c:30:9c:2e:9f:ff:16:09:d1:7a:03:ab:
5f:68:3f:07:87:75:72:4e:0f:a1:87:41:46:b9:eb:
a7:83:95:b2:52:81:c4:87:bd:ac:73:59:d3:e1:0d:
83:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:0B:B1:4A:7A:C2:4F:5E:36:37:B0:23:24:3A:AC:FF:7D:38:49:49
X509v3 Authority Key Identifier:
keyid:0C:B7:A2:AD:C6:DC:AF:17:7B:93:A3:36:CB:8E:CE:CC:5A:F3:02:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DLeircbcrxd7k6M2y47OzFrzAlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/2f7894-756d-4cbf-977c-3c5ae761cab0/1/DLeircbcrxd7k6M2y47OzFrzAlg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/2f7894-756d-4cbf-977c-3c5ae761cab0/1/DLeircbcrxd7k6M2y47OzFrzAlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:16:4c:d0:38:5c:ab:d6:5c:e1:32:79:cb:2c:a3:81:0d:9e:
fd:1d:1d:d4:5c:5d:f3:61:0f:86:ac:de:c4:a1:75:86:c1:f2:
d8:cc:e5:7f:19:f6:d2:00:13:3a:d1:ed:4e:b8:0c:d3:3e:bd:
65:64:1d:25:70:23:c5:69:13:a9:93:74:9a:37:b1:38:81:16:
b4:69:c0:52:2d:ca:77:03:fd:3d:6c:2a:e8:62:81:0f:30:39:
e1:76:46:1f:bc:de:e6:56:d3:42:98:fc:70:e8:98:bf:64:06:
72:b2:b2:b2:29:da:0d:90:b8:71:ff:20:03:73:cc:76:2c:b8:
8a:a7:fc:3b:3f:52:c9:aa:a9:28:4e:82:ab:a1:86:37:f8:9c:
d9:09:8a:3b:68:62:16:d1:20:b1:4a:82:a9:3e:97:e9:ed:65:
02:df:c8:8a:c5:c9:9e:bb:6f:b4:15:65:dd:ec:79:83:d5:fb:
be:03:d7:3f:5c:20:76:cd:5f:93:21:2a:2c:31:ee:b7:0f:de:
e8:92:9f:ec:95:d9:74:18:22:25:f3:80:0a:00:9d:c0:e2:b9:
9f:98:b2:2d:eb:f9:4b:11:6d:0c:c0:93:a6:5f:a8:eb:e6:6a:
5e:27:57:9b:da:77:91:81:97:6f:16:9e:02:82:9f:1b:da:41:
5c:86:51:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 15:13:18 2025 by rpki-client